CI: make build-ripunzip.yml auto-create update PR

Author: redsun82

.github/workflows/build-ripunzip.yml

@@ -4,11 +4,15 @@ on:
   workflow_dispatch:
     inputs:
       ripunzip-version:
-        description: "what reference to checktout from google/runzip"
+        description: What reference to checktout from google/runzip
         required: false
       openssl-version:
-        description: "what reference to checkout from openssl/openssl for Linux"
+        description: What reference to checkout from openssl/openssl for Linux
         required: false
+      open-pr:
+        description: Open a pull request updating the ripunzip versions committed to lfs
+        required: false
+        default: true  # will be false on PRs
   pull_request:
     paths:
       - .github/workflows/build-ripunzip.yml
@@ -68,11 +72,47 @@ jobs:
           lipo -create -output ripunzip-macos \
             -arch x86_64 target/x86_64-apple-darwin/release/ripunzip \
             -arch arm64 target/aarch64-apple-darwin/release/ripunzip
+      - name: Archive
+        shell: bash
+        run: |
+          zip -j ripunzip-${{ runner.os }}.zip ripunzip-*
       - uses: actions/upload-artifact@v4
         with:
           name: ripunzip-${{ runner.os }}
-          path: ripunzip-*
+          path: ripunzip-${{ runner.os }}.zip
+          retention-days: 5
+          compression: 0
       - name: Check built binary
         shell: bash
         run: |
+          rm -f ripunzip-*.zip
           ./ripunzip-* --version
+  publish:
+    needs: build
+    if: inputs.open-pr == 'true'
+    runs-on: ubuntu-slim
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: |
+            .github
+            misc/ripunzip
+      - name: Download built binaries
+        uses: actions/download-artifact@v4
+        with:
+          merge: true
+          path: misc/ripunzip
+      - name: Open PR
+        shell: bash
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git switch -c update-ripunzip
+          git add misc/ripunzip
+          git commit -m "Update ripunzip binaries to version ${{ inputs.ripunzip-version || env.RIPUNZIP_DEFAULT }}"
+          git push --set-upstream origin update-ripunzip --force
+          gh pr create \
+            --title "Update ripunzip binaries to version ${{ inputs.ripunzip-version || env.RIPUNZIP_DEFAULT }}" \
+            --body "Automated update of ripunzip binaries." \
+            --assignee "@$GITHUB_ACTOR"
+          gh pr merge --auto